{"metadata": {"vulnerability": "cve-2023-7183", "count": 23, "kinds": {"milestone": 5, "sighting": 4, "kev": 0, "other": 14}}, "data": [{"timestamp": "2023-12-30T00:00:00Z", "date_only": false, "value": "2023-12-30T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "cve-2023-7183", "field": "containers.cna.timeline.0.time", "text": "Advisory disclosed"}, {"timestamp": "2023-12-30T01:00:00Z", "date_only": false, "value": "2023-12-30T01:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "cve-2023-7183", "field": "containers.cna.timeline.2.time", "text": "VulDB entry created"}, {"timestamp": "2023-12-30T16:38:36.322Z", "date_only": false, "value": "2023-12-30T16:38:36.322Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-7183", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-31T06:01:38.674Z", "date_only": false, "value": "2023-12-31T06:01:38.674279Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-7183", "record": "GSD-2023-7183", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2023-12-31T10:31:03.773Z", "date_only": false, "value": "2023-12-31T10:31:03.773Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-7183", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-12-31T11:15:09Z", "date_only": false, "value": "2023-12-31T11:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-386P-MW98-MV23", "record": "GHSA-386P-MW98-MV23", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-12-31T11:15:09.377Z", "date_only": false, "value": "2023-12-31T11:15:09.377", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-7183", "record": "FKIE_CVE-2023-7183", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-12-31T11:15:09.377Z", "date_only": false, "value": "2023-12-31T11:15:09.377", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-7183", "record": "GSD-2023-7183", "field": "namespaces.nvd.nist.gov.cve.published", "linked_record": true}, {"timestamp": "2023-12-31T12:26:30Z", "date_only": false, "value": "2023-12-31T12:26:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/161070", "record": "CVE-2023-7183", "field": "creation_timestamp", "uuid": "e6db47af-ac45-47b8-9fb0-e9ed4a912328", "content": "https://ift.tt/9eXo4ty\nCVE-2023-7183", "url": "https://t.me/ctinow/161070"}, {"timestamp": "2023-12-31T12:30:32Z", "date_only": false, "value": "2023-12-31T12:30:32Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-386P-MW98-MV23", "record": "GHSA-386P-MW98-MV23", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-12-31T12:30:32Z", "date_only": false, "value": "2023-12-31T12:30:32Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-386P-MW98-MV23", "record": "GHSA-386P-MW98-MV23", "field": "modified", "linked_record": true}, {"timestamp": "2024-01-01T01:31:49Z", "date_only": false, "value": "2024-01-01T01:31:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/74065", "record": "CVE-2023-7183", "field": "creation_timestamp", "uuid": "8b8f02e0-3a40-4292-9fa7-f3e7b312838c", "content": "\u203c\ufe0fCVE-2023-7183\u203c\ufe0f\n\nA vulnerability has been found in 7card Fakabao up to 1.0build20230805 and classified as critical. Affected by this vulnerability is an unknown functionality of the file shopalipaynotify.php. The manipulation of the argument outtradeno leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB249385 was assigned to this vulnerability. NOTE The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "url": "https://t.me/cibsecurity/74065"}, {"timestamp": "2024-01-05T19:03:18.485Z", "date_only": false, "value": "2024-01-05T19:03:18.485236Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-7183", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-01-05T19:03:18.485Z", "date_only": false, "value": "2024-01-05T19:03:18.485236Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-7183", "record": "FKIE_CVE-2023-7183", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-01-22T07:40:57Z", "date_only": false, "value": "2024-01-22T07:40:57.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "cve-2023-7183", "field": "containers.cna.timeline.3.time", "text": "VulDB entry last update"}, {"timestamp": "2024-01-22T08:06:46Z", "date_only": false, "value": "2024-01-22T08:06:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/171017", "record": "CVE-2023-7183", "field": "creation_timestamp", "uuid": "4cace422-9558-4752-bd17-53f75b9e06cf", "content": "https://ift.tt/Uge0lVu\nCVE-2023-7183 | 7-card Fakabao up to 1.0_build20230805 shop/alipay_notify.php out_trade_no sql injection", "url": "https://t.me/ctinow/171017"}, {"timestamp": "2024-02-13T07:29:43.980Z", "date_only": false, "value": "2024-02-13T07:29:43.980Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "cve-2023-7183", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-04-11T01:23:40.123Z", "date_only": false, "value": "2024-04-11T01:23:40.123", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-7183", "record": "GSD-2023-7183", "field": "namespaces.nvd.nist.gov.cve.lastModified", "linked_record": true}, {"timestamp": "2024-08-02T08:50:08.197Z", "date_only": false, "value": "2024-08-02T08:50:08.197Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-7183", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-17T19:48:53.584Z", "date_only": false, "value": "2025-04-17T19:48:53.584Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-7183", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-17T19:48:53.584Z", "date_only": false, "value": "2025-04-17T19:48:53.584Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-7183", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-17T19:58:01Z", "date_only": false, "value": "2025-04-17T19:58:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12329", "record": "CVE-2023-7183", "field": "creation_timestamp", "uuid": "9df242ed-4a8b-4c33-b34c-0a12c501229e", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-7183\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability has been found in 7-card Fakabao up to 1.0_build20230805 and classified as critical. Affected by this vulnerability is an unknown functionality of the file shop/alipay_notify.php. The manipulation of the argument out_trade_no leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-249385 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2023-12-31T10:31:03.773Z\n\ud83d\udccf Modified: 2025-04-17T19:48:53.584Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.249385\n2. https://vuldb.com/?ctiid.249385\n3. https://note.zhaoj.in/share/NjPfD9xxhVRr", "url": "https://t.me/DarkWebInformer_CVEAlerts/12329", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T06:52:15.620Z", "date_only": false, "value": "2026-06-17T06:52:15.620", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-7183", "record": "FKIE_CVE-2023-7183", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-09T03:44:59.905Z", "anchors": {"origin": {"timestamp": "2023-12-31T10:31:03.773Z", "date_only": false, "value": "2023-12-31T10:31:03.773Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-7183", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-12-31T10:31:03.773Z", "date_only": false, "value": "2023-12-31T10:31:03.773Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-7183", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-04-17T19:58:01Z", "date_only": false, "value": "2025-04-17T19:58:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12329", "record": "CVE-2023-7183", "field": "creation_timestamp", "uuid": "9df242ed-4a8b-4c33-b34c-0a12c501229e", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-7183\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability has been found in 7-card Fakabao up to 1.0_build20230805 and classified as critical. Affected by this vulnerability is an unknown functionality of the file shop/alipay_notify.php. The manipulation of the argument out_trade_no leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-249385 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2023-12-31T10:31:03.773Z\n\ud83d\udccf Modified: 2025-04-17T19:48:53.584Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.249385\n2. https://vuldb.com/?ctiid.249385\n3. https://note.zhaoj.in/share/NjPfD9xxhVRr", "url": "https://t.me/DarkWebInformer_CVEAlerts/12329", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 40901217.227, "hours": 11361.449229722222, "days": 473.39371790509256, "min_seconds": 40901217.227, "max_seconds": 40901217.227, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-12-31T10:31:03.773Z", "date_only": false, "value": "2023-12-31T10:31:03.773Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-7183", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-04-17T19:58:01Z", "date_only": false, "value": "2025-04-17T19:58:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12329", "record": "CVE-2023-7183", "field": "creation_timestamp", "uuid": "9df242ed-4a8b-4c33-b34c-0a12c501229e", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-7183\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability has been found in 7-card Fakabao up to 1.0_build20230805 and classified as critical. Affected by this vulnerability is an unknown functionality of the file shop/alipay_notify.php. The manipulation of the argument out_trade_no leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-249385 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2023-12-31T10:31:03.773Z\n\ud83d\udccf Modified: 2025-04-17T19:48:53.584Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.249385\n2. https://vuldb.com/?ctiid.249385\n3. https://note.zhaoj.in/share/NjPfD9xxhVRr", "url": "https://t.me/DarkWebInformer_CVEAlerts/12329", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 90177236.132768, "hours": 25049.232259102224, "days": 1043.718010795926, "min_seconds": 90177236.132768, "max_seconds": 90177236.132768, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-12-31T10:31:03.773Z", "date_only": false, "value": "2023-12-31T10:31:03.773Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-7183", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-09T03:44:59.905Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 49276018.905768, "hours": 13687.78302938, "days": 570.3242928908334, "min_seconds": 49276018.905768, "max_seconds": 49276018.905768, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-17T19:58:01Z", "date_only": false, "value": "2025-04-17T19:58:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12329", "record": "CVE-2023-7183", "field": "creation_timestamp", "uuid": "9df242ed-4a8b-4c33-b34c-0a12c501229e", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-7183\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability has been found in 7-card Fakabao up to 1.0_build20230805 and classified as critical. Affected by this vulnerability is an unknown functionality of the file shop/alipay_notify.php. The manipulation of the argument out_trade_no leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-249385 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2023-12-31T10:31:03.773Z\n\ud83d\udccf Modified: 2025-04-17T19:48:53.584Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.249385\n2. https://vuldb.com/?ctiid.249385\n3. https://note.zhaoj.in/share/NjPfD9xxhVRr", "url": "https://t.me/DarkWebInformer_CVEAlerts/12329", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-09T03:44:59.905Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}